Overview
- Binance disclosed the incident on Friday, reporting an estimated $6.3 billion affected and temporarily pausing deposits and withdrawals while its teams run security checks.
- The exchange's preliminary probe points to a compromised DevOps engineer laptop that let an attacker reach a service container and submit unauthorized withdrawals, and Binance says it found no evidence of leaked wallet private keys.
- Industry partners and stablecoin issuers have frozen roughly $3 billion on-chain so far, with Tether and Circle accounting for large portions of those freezes.
- Blockchain intelligence firms have publicly linked the operation to North Korea‑linked hacking groups, and Binance has engaged law enforcement and analytics firms to trace and recover remaining funds.
- Binance has pledged to make affected users whole using its SAFU reserve and company funds, has revoked the affected authorizations, promised a technical post‑mortem, and the breach is likely to deepen market volatility and regulatory scrutiny.